Require the token only for a group of users

[3.24 and below]

It is currently not possible to force token usage for a group of users, either an access group or users coming from an AD group.